News for hackers. Stuff that matters.

A comment on The Satoshi Nakamoto Email Hacker Says He's Negotiating with the Bitcoin Founder. Parent comment

Re:The Satoshi Nakamoto Email Hacker Says He's Negotiating w... by flogic on Tuesday September 09, 2014 @08:00PM (#8294128)
A keepass password should be prohibitively hard to brute force that way. They're random and fairly long. It's far more likely the attacker found some other route.
[ Parent | on HN ]
Re:The Satoshi Nakamoto Email Hacker Says He's Negotiating w... by rdl on Wednesday September 10, 2014 @02:17AM (#8295163)
Recovery passwords for email accounts are actually kind of tricky, since the standard is generally recover-password-through-proof-of-control-of-email-account.

You can do SMS, but then you need phone numbers for users. Requiring "alternate email" is kind of a nightmare.

I wish someone could build a "account recovery as a service", with different levels of escalation. It would be fun to spec it out, but I have no time to actually set it up, since it's more a business vs. just some servers.

[ Parent | on HN ]